⬡ ⬡ ⬡ ⬡

GitLab CI/CD Lab: AWS S3 Bucket with OIDC

Complete the CI/CD Workflow

1. In the GitLab modal, clone the repository and name your working repo.

2. In the CodeStack editor, view the Code Coach and type the solution to configure OIDC authentication and create an S3 bucket.

3. In the GitLab modal, commit your changes and create a merge request.

4. In the AWS modal, verify the S3 bucket creation and complete the merge request.

Terminal

CodeStack
GitLab

Clone Repository

Are you sure you want to clone the repository?

Commit Changes

Are you sure you want to commit and push changes?

Create Merge Request

Are you sure you want to create a merge request?

Pipeline Runs
AWS

Pipeline Details

Verify and Deploy
Explain This Code

What’s happening here?

This GitLab CI/CD pipeline defines a “deploy” stage with a “create_s3” job. It uses the amazon/aws-cli image and configures OIDC authentication with an “AWS_OIDC_TOKEN” for the “sts.amazonaws.com” audience. The “before_script” assumes an IAM role (GitLabS3DeployRole) and sets temporary AWS credentials. The “script” creates an S3 bucket named “my-s3-bucket” if it doesn’t exist, triggered only on the “main” branch.
⬡ ⬡ ⬡ ⬡

Success!

Congrats on completing the GitLab CI/CD Lab!